Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02edadde-197f-4705-965b-98ca768d3258.roa
File:                     02edadde-197f-4705-965b-98ca768d3258.roa (raw, json)
Hash identifier:          m2VquaLhZb+fd+v6IPG3o452/vCt/IujfXnRwZ2azow=
Subject key identifier:   EB:D7:D0:6E:4C:51:30:90:BB:7C:92:44:D7:D5:49:3B:7F:14:5B:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FE2B26596AA8CD0E333BEC6CB60D0DCD11EB3FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02edadde-197f-4705-965b-98ca768d3258.roa
Signing time:             Sat 30 Aug 2025 00:31:10 +0000
ROA not before:           Sat 30 Aug 2025 00:31:10 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:b2:65:96:aa:8c:d0:e3:33:be:c6:cb:60:d0:dc:d1:1e:b3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:31:10 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=8b9a82f91a771139f065f6ff1466d77edc266d5a68aceca871911165d5217b91, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:0a:60:4c:1e:b3:81:86:1e:18:89:71:ce:
                    51:58:79:8f:10:bf:88:ec:73:7b:26:9b:24:07:d4:
                    35:f3:8a:2e:f4:51:b5:39:8e:d5:4d:e0:fa:26:56:
                    2b:86:0e:b6:a4:cd:e4:c7:ea:60:99:8e:c8:ca:f9:
                    94:e0:d4:00:59:ef:d9:83:83:19:78:da:68:ef:1b:
                    92:e7:d5:02:4f:93:c4:92:35:a5:77:f6:33:34:80:
                    b7:3a:6e:11:8f:04:dc:ac:ed:10:64:b4:42:4c:26:
                    ec:6e:b1:b1:89:c6:c7:a5:1d:12:7b:d4:dd:fe:1f:
                    20:91:bd:09:cb:c9:60:69:a8:64:b6:84:f3:9b:84:
                    20:46:e6:04:18:3e:f9:31:f5:21:48:7d:5e:48:5f:
                    4d:68:7a:7e:a8:fe:8b:9a:0f:ba:31:e7:05:a5:75:
                    fe:57:6e:24:93:e2:d3:6e:20:45:2a:8e:12:72:01:
                    da:1f:8b:d1:ab:eb:41:c1:e7:70:10:90:0f:26:a3:
                    c3:77:92:09:5d:7b:26:52:2d:69:ea:7c:bd:96:55:
                    f4:d3:51:28:b7:71:9f:e0:87:75:2e:0c:c5:71:f3:
                    39:79:de:3e:e7:8d:e8:3c:f0:2a:34:7a:83:03:b4:
                    12:38:b7:fc:ff:52:13:36:96:90:ec:c7:90:fd:72:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:D0:6E:4C:51:30:90:BB:7C:92:44:D7:D5:49:3B:7F:14:5B:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02edadde-197f-4705-965b-98ca768d3258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:47:7e:06:e5:db:4d:5d:13:e9:16:4c:c4:1b:a1:a4:a5:
         9c:47:2a:53:16:4e:98:07:af:95:34:72:1b:d1:b6:ef:7c:33:
         e0:02:d3:f0:25:fc:92:0b:62:9c:8c:ae:6b:4a:14:ea:76:f1:
         01:3a:a7:ec:a8:78:ee:45:d5:87:6d:5c:a7:ab:e2:35:f1:3a:
         53:26:96:b7:9d:57:3c:3e:67:4f:6a:70:ab:12:18:a2:e4:8d:
         37:2b:b5:95:f6:57:3a:15:55:60:48:71:8b:fe:3a:14:1f:21:
         06:9a:80:70:b0:8c:88:1e:5d:0d:c3:bd:79:91:cb:d2:51:9a:
         a5:34:d5:4d:ef:e8:cb:b6:b6:92:0c:84:0e:e0:02:f0:ce:11:
         8d:22:32:93:e0:e2:7c:13:30:95:22:8f:48:d2:24:21:30:11:
         5c:bf:43:89:c4:9c:d6:0f:af:5b:de:60:ba:24:19:97:49:90:
         78:28:d2:d8:14:70:e9:5a:07:b7:cf:94:c7:b1:41:0a:db:97:
         d0:e3:b2:14:d4:4d:55:13:78:27:e5:8f:12:7d:3f:65:ee:77:
         30:da:f2:8c:ff:7c:89:67:13:69:ff:bb:72:fd:fe:eb:b4:8d:
         34:f7:27:04:fc:a1:9e:f7:99:86:38:71:b0:d8:d1:90:63:2d:
         e2:c5:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:12:17 2025 by rpki-client